Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
24 changes: 13 additions & 11 deletions src/content/docs/security/analytics.mdx
Original file line number Diff line number Diff line change
@@ -1,28 +1,30 @@
---
title: Security analytics (new dashboard)
title: Security Analytics (new dashboard)
pcx_content_type: concept
sidebar:
order: 3
label: Security analytics
description: Security analytics shows information about all incoming HTTP requests or mitigated requests (rule matches).
label: Security Analytics
description: Security Analytics shows information about all incoming HTTP requests or mitigated requests (rule matches).
---

import { Stream, GlossaryTooltip } from "~/components";
import { Stream, GlossaryTooltip, DashButton } from "~/components";

Security analytics shows information about all incoming HTTP requests or only about requests mitigated by Cloudflare.
Security Analytics shows information about all incoming HTTP requests or only about requests mitigated by Cloudflare.

Use Security analytics as your starting point to understand and analyze traffic patterns, and to create security rules based on the filters you applied.
Use Security Analytics as your starting point to understand and analyze traffic patterns, and to create security rules based on the filters you applied.

By default, Security Analytics queries filter on `requestSource = 'eyeball'`, which represents requests from end users. Note that requests from Cloudflare Workers (subrequests) are not visible in Security Analytics.
To access Security Analytics in the new security dashboard, go to the **Analytics** page.

Security analytics is available in **Security** > **Analytics**.
<DashButton url="/?to=/:account/:zone/security/analytics" />

<Stream
id="1a426a3ae597ae3935eb97b5f97f106f"
title="Application Security: Get started guide"
thumbnail="https://pub-d9bf66e086fb4b639107aa52105b49dd.r2.dev/appsec-get-started-guide.png"
id="1a426a3ae597ae3935eb97b5f97f106f"
title="Application Security: Get started guide"
thumbnail="https://pub-d9bf66e086fb4b639107aa52105b49dd.r2.dev/appsec-get-started-guide.png"
/>

By default, Security Analytics queries filter on `requestSource = 'eyeball'`, which represents requests from end users. Note that requests from Cloudflare Workers (subrequests) are not visible in Security Analytics.

## Traffic

The **Traffic** tab displays information about all incoming HTTP requests for your domain, including requests not handled by Cloudflare security products.
Expand Down
10 changes: 6 additions & 4 deletions src/content/docs/security/index.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -16,9 +16,9 @@ import {
LinkTitleCard,
RelatedProduct,
Stream,
DashButton,
} from "~/components";


The application security dashboard is your starting point to better understand the security posture of your web applications, and to configure rules to protect them.

<Card title="New dashboard experience" icon="rocket">
Expand All @@ -31,9 +31,11 @@ Cloudflare is gradually making the new **Security** dashboard available by defau

To opt out of the new security dashboard:

1. Log in to the [Cloudflare dashboard](https://dash.cloudflare.com), and select your account and domain.
2. Go to **Security** > **Settings**.
3. Search for the setting **New application security dashboard** and turn it off.
1. In the Cloudflare dashboard, go to the Security **Settings** page.

<DashButton url="/?to=/:account/:zone/security/settings" />

2. Turn off the setting **New application security dashboard**.

The opt-out option will be available for a limited time.

Expand Down
13 changes: 10 additions & 3 deletions src/content/docs/security/overview.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -5,10 +5,17 @@ sidebar:
order: 2
---

import { DashButton } from "~/components";

Security overview provides a high-level overview of your domain. It allows you to identify security action items and review the security posture of your domain.

To acess Security overview in the new security dashboard, go to the **Overview** page.

<DashButton url="/?to=/:account/:zone/security/overview" />

The Security overview page displays the following information:

- If you are on a Free plan, the dashboard will display **Traffic last 24 hours**, which allows you to review traffic from the 24 hours that has been mitigated by Cloudflare. If you are on a Business, Pro, or Enterprise plan, the dashboard will display **Traffic last 7 days**, which allows you to review traffic from the last seven days that has been mitigated by Cloudflare.
- **Security category**: The dashboard will display security suggestions categorized by the different types of threats that Cloudflare detects and mitigates.
- **All suggestions**: The dashboard displays the full list of available suggestions to improve your security posture.
- **Traffic last 24 hours** (Free plan only): Allows you to review traffic from the last 24 hours that has been mitigated by Cloudflare.
- **Traffic last 7 days** (paid plans): Allows you to review traffic from the last seven days that has been mitigated by Cloudflare.
- **Security category**: Displays security suggestions categorized by the different types of threats that Cloudflare detects and mitigates.
- **All suggestions**: Displays the full list of available suggestions to improve your security posture.
19 changes: 13 additions & 6 deletions src/content/docs/security/rules.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -6,20 +6,27 @@ sidebar:
description: Security rules perform security actions on incoming requests that match specified filters.
---

import { DashButton } from "~/components";

Security rules perform security-related actions on incoming requests that match specified filters. Rules are evaluated and executed in order, from first to last.

Security rules are available in the new security dashboard in **Security** > **Security rules**.
To access security rules in the new security dashboard, go to the **Security rules** page.

<DashButton url="/?to=/:account/:zone/security/security-rules" />

## Security rules

The **Security rules** tab includes a list of different types of rules configured in your domain/zone to protect your applications and resources.

To create a security rule:

1. Log in to the [Cloudflare dashboard](https://dash.cloudflare.com/) and select your account and domain.
2. Go to **Security** > **Security rules**.
3. (Optional) Select **Templates**, and then select a template from the list. You can customize the default configuration of the template before deploying the new rule. Refer to the resources listed in the next step.
4. Select **Create rule** > select the type of rule you want to create. Refer to the following resources about each rule type:
1. In the Cloudflare dashboard, go to the **Security rules** page.

<DashButton url="/?to=/:account/:zone/security/security-rules" />

2. (Optional) Select **Templates**, and then select a template from the list. You can customize the default configuration of the template before deploying the new rule. Refer to the resources listed in the next step.

3. Select **Create rule** > select the type of rule you want to create. Refer to the following resources about each rule type:
- [Custom rules](/waf/custom-rules/create-dashboard/#rule-form)
- [Rate limiting rules](/waf/rate-limiting-rules/create-zone-dashboard/#rule-form)
- [API sequence rules](/api-shield/security/sequence-mitigation/#rule-form)
Expand All @@ -29,7 +36,7 @@ To create a security rule:

:::note[Notes]

To deploy a managed ruleset, go to **Security** > **Settings** and filter by **Web application exploits**. For more information, refer to [Deploy a managed ruleset](/waf/managed-rules/deploy-zone-dashboard/#deploy-a-managed-ruleset).
To deploy a managed ruleset, go to the Security **Settings** page. For more information, refer to [Deploy a managed ruleset](/waf/managed-rules/deploy-zone-dashboard/#deploy-a-managed-ruleset).

The **Security rules** tab includes functionality available in different products in the previous dashboard navigation structure, such as the [WAF](/waf/), [API Shield](/api-shield/), and [Page Shield](/page-shield/).

Expand Down
8 changes: 7 additions & 1 deletion src/content/docs/security/settings.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,13 @@ sidebar:
description: Configure different Cloudflare security features that protect your web applications, APIs, and resources.
---

This page describes the settings available in **Security** > **Settings** for a given domain.
import { DashButton } from "~/components";

This page describes the security settings available in the new security dashboard for a given domain.

To access security settings in the new security dashboard, go to the **Settings** page.

<DashButton url="/?to=/:account/:zone/security/settings" />

## Security setting categories

Expand Down
14 changes: 13 additions & 1 deletion src/content/docs/security/web-assets.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -6,8 +6,14 @@ sidebar:
description: Discover web assets such as your API endpoints and instruct Cloudflare how to best protect them.
---

import { DashButton } from "~/components";

Discover web assets such as your API endpoints and instruct Cloudflare how to best protect them.

To access web assets in the new security dashboard, go to the **Web assets** page.

<DashButton url="/?to=/:account/:zone/security/web-assets" />

## Endpoints

Use the **Endpoints** tab to manage endpoints available on your domain and monitor their health.
Expand Down Expand Up @@ -43,7 +49,13 @@ Use **Sequences** to discover how users interact with your API, by tracking the

Once you configure [session identifiers](/api-shield/management-and-monitoring/session-identifiers/), the **Sequences** tab will start grouping and highlighting important user journeys (sequences) across your API.

To configure session identifiers, go to **Security** > **Settings** and select **Configure session identifiers** next to **Session identifiers**.
To configure session identifiers:

1. In the Cloudflare dashboard, go to the Security **Settings** page.

<DashButton url="/?to=/:account/:zone/security/settings" />

2. Next to **Session identifiers**, select **Configure session identifiers** .

For more information on how Cloudflare identifies API sequences and how you can configure API sequence rules, refer to the following resources:

Expand Down